Oracle Database, Oracle WebLogic Server

ソフト名：Oracle Database 10g Release 1 version 10.1.0.5/Release 2 versions 10.2.0.3/10.2.0.4/10.2.0.5/11g Release 1 version 11.1.0.7/Release 2 versions 11.2.0.1/11.2.0.2, Oracle WebLogic Server 8.1.6/9.2.3/9.2.4/10.0.2/11gR1 (10.3.2, 10.3.3, 10.3.4)

回避策：あり

脆弱性：データ操作, 機密情報の奪取, DoS攻撃, システムアクセス, 不特定のエラー, リモートコード実行, 無限ループ

ソース：http://www.oracle.com/us/products/database/index.html

http://www.oracle.com/us/products/database/index.html

http://www.oracle.com/us/corporate/Acquisitions/bea/index.html?CNT=index.htm&FP=/content/products/server/&origref=http://secunia.com/advisories/product/1360/

http://www.oracle.com/us/corporate/Acquisitions/bea/index.html?CNT=index.htm&FP=/content/products/weblogic/server&origref=http://secunia.com/advisories/product/5822/

http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html#AppendixDB

http://secunia.com/advisories/37291/

http://secunia.com/advisories/44228/

http://secunia.com/advisories/44246/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3555

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0785

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0787

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0792

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0793

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0799

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0804

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0805

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0806

CVE：CVE-2009-3555, CVE-2011-0785, CVE-2011-0787, CVE-2011-0792, CVE-2011-0793, CVE-2011-0799, CVE-2011-0804, CVE-2011-0805, CVE-2011-0806

危険性：Medium Risk